MCP Radar
MCP-Server

tailscale

io.usefulapi/tailscale
Cloud & Infrastruktur Sicherheit Öffentlich und erreichbar MCP 2026-07-28

Was dieses MCP kann

Manages Tailscale tailnet devices, routes, users, DNS, ACL policies, authentication keys, and device security actions.

Funktionen

Tools

22 Tools
tailscale_authorize_device
Authorize device
Authorize or de-authorize a device (only relevant when device approval is enabled for the tailnet). Tailscale REST: POST /device/{deviceId}/authorized.
Destruktiv
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'required': ['deviceId', 'authorized'], 'properties': {'deviceId': {'type': 'string', 'description': 'The device id.'}, 'authorized': {'type': 'boolean', 'description': 'True to authorize the device into the tailnet, false to de-authorize it.'}}}
tailscale_create_auth_key
Create auth key
Create a new auth key for the tailnet (used to register new devices). Tailscale REST: POST /tailnet/{tailnet}/keys.
Destruktiv
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {'tags': {'type': 'array', 'items': {'type': 'string'}, 'description': 'ACL tags to apply to devices created with this key, e.g. ["tag:ci"].'}, 'reusable': {'type': 'boolean', 'description': 'If true, the key can register multiple devices.'}, 'ephemeral': {'type': 'boolean', 'description': 'If true, devices registered with this key are ephemeral (removed shortly after going offline).'}, 'description': {'type': 'string', 'description': 'A short description for the key.'}, 'expirySeconds': {'type': 'number', 'description': 'Key lifetime in seconds; 0 means no expiry (if allowed by tailnet policy).'}, 'preauthorized': {'type': 'boolean', 'description': 'If true, devices registered with this key are pre-authorized (skip device approval).'}}}
tailscale_delete_device
Delete device
Delete a device, removing it from the tailnet. Tailscale REST: DELETE /device/{deviceId}.
Destruktiv
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'required': ['deviceId'], 'properties': {'deviceId': {'type': 'string', 'description': 'The device id to delete.'}}}
tailscale_delete_key
Delete key
Delete (revoke) an auth key or API access token by id — a security response. Tailscale REST: DELETE /tailnet/{tailnet}/keys/{keyId}.
Destruktiv
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'required': ['keyId'], 'properties': {'keyId': {'type': 'string', 'description': 'The key id to delete.'}}}
tailscale_expire_device_key
Expire device key
Expire a device's node key, forcing it to re-authenticate — a security response to a compromised or lost device. Tailscale REST: POST /device/{deviceId}/expire.
Destruktiv
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'required': ['deviceId'], 'properties': {'deviceId': {'type': 'string', 'description': 'The device id.'}}}
tailscale_get_device
Get device
Get a single device by id. Tailscale REST: GET /device/{deviceId}.
Nur Lesen
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'required': ['deviceId'], 'properties': {'fields': {'enum': ['default', 'all'], 'type': 'string', 'description': "Field set — 'all' returns all fields incl. posture attributes and routes; 'default' is the standard subset."}, 'deviceId': {'type': 'string', 'description': 'The device id.'}}}
tailscale_get_dns_preferences
Get DNS preferences
Get the tailnet's DNS preferences (e.g. whether MagicDNS is enabled). Tailscale REST: GET /tailnet/{tailnet}/dns/preferences.
Nur Lesen
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {}}
tailscale_get_key
Get key
Get details of a single auth key / API access token by id (capabilities, expiry, usage). Tailscale REST: GET /tailnet/{tailnet}/keys/{keyId}.
Nur Lesen
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'required': ['keyId'], 'properties': {'keyId': {'type': 'string', 'description': 'The key id.'}}}
tailscale_get_policy_file
Get policy file
Get the tailnet's ACL / policy file (returned as JSON via the Accept header, not HuJSON). Tailscale REST: GET /tailnet/{tailnet}/acl.
Nur Lesen
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {'details': {'type': 'boolean', 'description': 'If true, include metadata about the policy file (e.g. when and by whom it was last updated).'}}}
tailscale_get_split_dns
Get split DNS
Get the tailnet's split-DNS configuration — a map of domain → nameservers. Tailscale REST: GET /tailnet/{tailnet}/dns/split-dns.
Nur Lesen
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {}}
tailscale_get_tailnet_settings
Get tailnet settings
Get the tailnet's settings (device approval, key expiry, posture, etc.). Tailscale REST: GET /tailnet/{tailnet}/settings.
Nur Lesen
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {}}
tailscale_get_user
Get user
Get a single user by id. Tailscale REST: GET /users/{userId}.
Nur Lesen
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'required': ['userId'], 'properties': {'userId': {'type': 'string', 'description': 'The user id.'}}}
tailscale_list_device_routes
List device routes
List the subnet routes a device advertises and which are enabled. Tailscale REST: GET /device/{deviceId}/routes.
Nur Lesen
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'required': ['deviceId'], 'properties': {'deviceId': {'type': 'string', 'description': 'The device id.'}}}
tailscale_list_devices
List devices
List all devices in the tailnet (name, addresses, OS, last seen, tags, etc.). Tailscale REST: GET /tailnet/{tailnet}/devices.
Nur Lesen
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {'fields': {'enum': ['default', 'all'], 'type': 'string', 'description': "Field set — 'all' returns all fields incl. posture attributes and routes; 'default' is the standard subset."}}}
tailscale_list_dns_nameservers
List DNS nameservers
List the global DNS nameservers configured for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/dns/nameservers.
Nur Lesen
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {}}
tailscale_list_dns_searchpaths
List DNS search paths
List the DNS search paths (search domains) configured for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/dns/searchpaths.
Nur Lesen
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {}}
tailscale_list_keys
List keys
List auth keys and API access tokens for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/keys.
Nur Lesen
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {'all': {'type': 'boolean', 'description': "If true, returns all keys, tokens and OAuth clients in the tailnet, not just the caller's own (requires appropriate scope). Default false."}}}
tailscale_list_users
List users
List users of the tailnet, optionally filtered by type, role or status. Tailscale REST: GET /tailnet/{tailnet}/users.
Nur Lesen
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {'role': {'type': 'string', 'description': 'Filter by role, e.g. owner, admin, member, it-admin, network-admin, billing-admin, auditor.'}, 'type': {'enum': ['all', 'member', 'shared', 'invited'], 'type': 'string', 'description': 'Filter by user type.'}, 'status': {'enum': ['all', 'active', 'idle', 'suspended', 'needs-approval', 'over-billing-limit'], 'type': 'string', 'description': 'Filter by user status.'}}}
tailscale_list_webhooks
List webhooks
List the webhook endpoints configured for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/webhooks.
Nur Lesen
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {}}
tailscale_set_device_name
Set device name
Set (rename) a device's name. Tailscale REST: POST /device/{deviceId}/name.
Destruktiv
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'required': ['deviceId', 'name'], 'properties': {'name': {'type': 'string', 'description': 'The new device name.'}, 'deviceId': {'type': 'string', 'description': 'The device id.'}}}
tailscale_set_device_routes
Set device routes
Set the subnet routes ENABLED for a device (from the routes it advertises). REPLACES the enabled set. Tailscale REST: POST /device/{deviceId}/routes.
Destruktiv
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'required': ['deviceId', 'routes'], 'properties': {'routes': {'type': 'array', 'items': {'type': 'string'}, 'description': 'The set of subnet routes (CIDRs) to ENABLE for this device, e.g. ["10.0.0.0/24"]. REPLACES the enabled set.'}, 'deviceId': {'type': 'string', 'description': 'The device id.'}}}
tailscale_set_device_tags
Set device tags
Set a device's ACL tags. REPLACES the device's existing tags. Tailscale REST: POST /device/{deviceId}/tags.
Destruktiv
Eingabeschema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'required': ['deviceId', 'tags'], 'properties': {'tags': {'type': 'array', 'items': {'type': 'string'}, 'description': 'ACL tags to apply, e.g. ["tag:server"]. REPLACES the device\'s existing tags.'}, 'deviceId': {'type': 'string', 'description': 'The device id.'}}}
Verlauf

Letzte Tool-Änderungen

Geändert
tailscale_delete_device
1. October 2026 02:42
Geändert
tailscale_delete_key
1. October 2026 02:42
Geändert
tailscale_create_auth_key
1. October 2026 02:42
Geändert
tailscale_set_device_routes
1. October 2026 02:42
Geändert
tailscale_expire_device_key
1. October 2026 02:42
Geändert
tailscale_set_device_tags
1. October 2026 02:42
Geändert
tailscale_set_device_name
1. October 2026 02:42
Geändert
tailscale_authorize_device
1. October 2026 02:42
Geändert
tailscale_get_tailnet_settings
1. October 2026 02:42
Geändert
tailscale_list_webhooks
1. October 2026 02:42
Geändert
tailscale_get_user
1. October 2026 02:42
Geändert
tailscale_list_users
1. October 2026 02:42
Geändert
tailscale_get_split_dns
1. October 2026 02:42
Geändert
tailscale_list_dns_searchpaths
1. October 2026 02:42
Geändert
tailscale_get_dns_preferences
1. October 2026 02:42
Geändert
tailscale_list_dns_nameservers
1. October 2026 02:42
Geändert
tailscale_get_policy_file
1. October 2026 02:42
Geändert
tailscale_get_key
1. October 2026 02:42
Geändert
tailscale_list_keys
1. October 2026 02:42
Geändert
tailscale_list_device_routes
1. October 2026 02:42
Geändert
tailscale_get_device
1. October 2026 02:42
Geändert
tailscale_list_devices
1. October 2026 02:42
Hinzugefügt
tailscale_delete_device
25. September 2026 02:44
Hinzugefügt
tailscale_delete_key
25. September 2026 02:44
Hinzugefügt
tailscale_create_auth_key
25. September 2026 02:44
Hinzugefügt
tailscale_set_device_routes
25. September 2026 02:44
Hinzugefügt
tailscale_expire_device_key
25. September 2026 02:44
Hinzugefügt
tailscale_set_device_tags
25. September 2026 02:44
Hinzugefügt
tailscale_set_device_name
25. September 2026 02:44
Hinzugefügt
tailscale_authorize_device
25. September 2026 02:44
Entdecken

Ähnliche MCP-Server

BorealHost

ai.borealhost/mcp

Provides web hosting and infrastructure management, including site deployment, DNS, domains, containers, compute, backups, cachin…

BlackVeil DNS & Email Security Scanner

com.blackveilsecurity/dns

Audits domain, DNS, email, certificate, HTTP, brand-impersonation, and agent-discovery security controls.

Hackertarget

io.github.pipeworx-io/hackertarget

Performs passive DNS, ASN, IP geolocation, HTTP header, ping, link, and network-path reconnaissance and diagnostics.

Busymate DevTools

dev.busymate/busymate-devtools

Captures, inspects, exports, and debugs HTTPS traffic from devices and applications, with request and response inspection, proxy …

Ripe Stat

io.github.pipeworx-io/ripe-stat

Provides RIPE registry and routing data for IP addresses, prefixes, ASNs, BGP state and neighbors, network ownership, geolocation…

Cloudflare Radar

io.github.pipeworx-io/cloudflare-radar

Provides Cloudflare Radar internet observatory data on DDoS attacks, BGP leaks, domain popularity, internet quality, and traffic …

Domains

io.github.pipeworx-io/domains

Checks domain registration status and availability and searches certificate-transparency records for certificates and subdomains.

Rdap

io.github.pipeworx-io/rdap

Looks up authoritative RDAP registration records for domains, IP addresses, autonomous systems, entities, and nameservers.